Privacy Policy
Effective 29 July 2026. This policy explains how SL MedTube collects, uses, shares, stores, and protects personal data when you use our website and virtual consultation services.
We collect information needed to operate accounts, bookings, payments, notifications, and consultations. Consultation information is available to the patient, the assigned doctor, and authorized personnel only where necessary.
1. Who we are
SL MedTube is a Sri Lankan virtual consultation service that enables patients to book and communicate with Dr. Dilantha Rasanjan through supported text, voice, and video methods. For privacy questions or requests, contact [email protected].
2. Information we collect
- Account and identity information: your name, address, NIC number, mobile number, optional email address, account role, and verification status.
- Booking information: your selected package, consultation time, message to the doctor, booking status, and consultation start and expiry times.
- Health and consultation information: symptoms, questions, messages, and other information you choose to provide. Voice and video are transmitted for the live call and are not recorded by SL MedTube unless you are clearly informed and separately agree.
- Payment information: payment method and status, PayHere references, bank-transfer references, and uploaded payment evidence. SL MedTube does not receive or store your complete card number or card security code.
- Technical and security information: login activity, browser and device information, session and presence status, audit events, and error records.
- Support information: details included in contact forms and communications with our support team.
3. How we use information
We process information to create and verify accounts; authenticate users; arrange, confirm, and operate consultations; process or verify payments; provide text, voice, and video features; send service notifications; prevent fraud and misuse; provide support; maintain records; improve reliability; and comply with legal, regulatory, tax, accounting, or professional obligations.
4. Legal grounds and sensitive information
Depending on the activity, processing is based on providing the service you request, your consent, compliance with legal obligations, and legitimate interests such as platform security and administration. Health information may be sensitive personal data. Please share only information relevant to your consultation. Where consent applies, you may withdraw it, but this does not affect processing already carried out and may prevent us from continuing the affected service.
5. Who receives information
Your consultation information is shared with your assigned doctor. Limited data may also be processed by Text.LK for SMS, Brevo for transactional email, PayHere for card payments, hosting providers, and providers supporting secure real-time connectivity. Authorized administrators may access information when needed for account support, payment review, safety, security, or legal compliance. We do not sell personal data.
6. International processing
Some service providers may process data outside Sri Lanka. Where this occurs, we take reasonable steps to use reputable providers and appropriate contractual, organizational, and technical safeguards, subject to applicable Sri Lankan requirements.
7. Retention
We retain information only for as long as needed for the purposes described above and for applicable healthcare, professional, tax, accounting, dispute, fraud-prevention, and legal requirements. Retention periods differ by record type. Data may be securely deleted or anonymized when no longer required. Backup copies may remain until their normal secure rotation completes.
8. Security
Safeguards include HTTPS encryption in transit, hashed passwords and OTPs, access controls, restricted consultation rooms, session protections, audit records, and protected file storage. No online system is completely risk-free. Keep passwords and verification codes confidential, sign out on shared devices, and notify us promptly of suspected unauthorized access.
9. Your rights and choices
Subject to applicable law, you may ask whether we process your personal data and request access, correction, completion, erasure, restriction, objection, or withdrawal of consent. You may also raise a concern about automated processing or request information about data sharing. Some requests may be limited where retention or processing is required for healthcare, legal, payment, security, or dispute purposes.
10. Cookies and sessions
SL MedTube uses essential session cookies for secure login, CSRF protection, and account functionality. These cookies are not used for third-party advertising. Disabling them may prevent registration, login, booking, or consultation features from working.
11. Children and dependent patients
The service is intended for people legally able to create an account and consent to its use. A parent or lawful guardian arranging care for a child or dependent person must have authority to do so and provide accurate information. Do not create an account for another independent adult without authorization.
12. Notifications
We send operational SMS and, where supplied, email notifications for account verification, booking and payment events, consultation messages, and expiry. Message notifications may be grouped to reduce repeated SMS or email. You cannot opt out of communications strictly necessary for account security or an active service, but you may contact us about notification preferences.
13. Changes and complaints
We may update this policy when the service or applicable requirements change. The effective date above identifies the latest version. Contact [email protected] first so we can investigate a privacy concern. You may also have the right to complain to the Data Protection Authority of Sri Lanka.